Actually i posted a sql injection tutorial on this site. SQL injections is one of my favorite methods to do i would reccomend going to Milw0rm.com for the MOST up to date slq vunerbilites like RSQL SQl ICH IVN ARC stuff like that